Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/3R8jrrz9mGX2spWoXF8DzwgYQfw.roa
File: 3R8jrrz9mGX2spWoXF8DzwgYQfw.roa (raw, json)
Hash identifier: PkUaxv0uWqpyzzJ8AGmM0OK5NkiUZyu8Z3AfdhN9REw=
Subject key identifier: DD:1F:23:AE:BC:FD:98:65:F6:B2:95:A8:5C:5F:03:CF:08:18:41:FC
Certificate issuer: /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial: 0185B53A31CD228648E20ED9B2CBE5AA24EF
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/3R8jrrz9mGX2spWoXF8DzwgYQfw.roa
Signing time: Sun 15 Jan 2023 11:39:28 +0000
ROA not before: Sun 15 Jan 2023 11:39:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49022
IP address blocks: 185.190.25.0/24 maxlen: 24
45.139.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b5:3a:31:cd:22:86:48:e2:0e:d9:b2:cb:e5:aa:24:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Validity
Not Before: Jan 15 11:39:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd1f23aebcfd9865f6b295a85c5f03cf081841fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fe:45:ae:55:ba:51:39:c2:04:73:72:20:92:
b4:37:3e:35:e9:c7:2b:67:e6:c5:fd:68:f8:8a:7e:
35:24:45:d7:ce:cd:03:d9:86:2f:2f:b3:68:8a:91:
42:d0:e3:00:04:65:54:b4:32:4a:3b:2c:5b:6a:43:
6f:87:88:3d:6b:34:f6:85:66:ec:8b:49:65:09:0e:
8e:da:3a:e6:13:a1:8e:c1:00:9e:79:03:3e:c2:e2:
af:a7:15:04:3d:87:fc:ae:48:5b:1a:3f:5b:f3:c8:
b5:fa:80:be:27:a5:63:79:76:f5:6c:f9:db:27:1d:
b5:e5:05:6a:0e:83:a9:b1:d3:87:47:d4:88:27:e7:
e6:a8:66:87:2d:43:9e:93:ec:70:84:9b:3d:73:45:
66:0f:29:98:ba:ff:55:43:5f:1a:a9:44:9b:7b:7e:
61:62:6d:1a:af:fb:40:e6:25:96:71:10:a1:27:e0:
85:66:47:1d:fa:53:e0:85:17:f0:54:7a:86:b7:88:
24:db:53:21:2f:90:48:cb:ca:54:88:82:46:f3:92:
d3:8c:d5:9c:fb:1e:3f:d2:30:94:ab:59:1b:d1:fc:
cd:ad:d2:2d:0f:45:9a:b4:39:8b:86:49:81:f0:67:
4a:af:95:d6:6a:84:39:dc:54:01:1d:f5:39:39:ff:
ea:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1F:23:AE:BC:FD:98:65:F6:B2:95:A8:5C:5F:03:CF:08:18:41:FC
X509v3 Authority Key Identifier:
keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/3R8jrrz9mGX2spWoXF8DzwgYQfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.8.0/24
185.190.25.0/24
Signature Algorithm: sha256WithRSAEncryption
12:1f:80:ff:c1:a9:b0:4c:fb:e3:b9:09:3a:b2:b3:9a:ff:ed:
ff:29:f8:af:14:4f:6d:05:0e:9c:6b:75:c3:b3:17:ea:99:a3:
b3:b3:df:b7:7a:92:dd:8c:36:32:9f:cb:d8:82:5f:05:18:84:
b1:9c:90:99:d3:32:d4:9b:42:1f:91:12:47:ca:ee:36:1c:df:
c5:83:69:c1:dc:85:fc:47:75:29:46:be:ff:2d:04:40:c3:88:
b8:1f:b0:b7:81:54:4b:06:38:d2:16:e6:92:31:cc:53:89:af:
19:19:34:4d:e8:1f:1f:28:95:07:80:2d:a8:02:31:8e:b1:91:
e2:e3:1c:96:1b:49:c7:fd:59:fa:2c:81:7f:1e:4d:e2:ff:7e:
b0:db:97:05:85:39:4d:fd:dd:36:18:35:c9:55:44:89:b7:53:
0f:f0:ca:77:45:e9:ca:24:e6:49:7a:ee:33:2c:b6:d2:1c:25:
00:d7:e7:59:34:5d:61:b8:33:61:55:74:bb:42:e9:56:55:24:
df:51:bd:1d:e6:05:e1:53:04:da:e3:39:13:4d:8e:30:83:ca:
eb:59:7a:87:56:7e:a8:91:d8:80:36:51:1f:31:ea:5d:60:b4:
44:eb:c7:9f:4f:db:63:8a:0b:65:02:15:3b:84:7a:b9:41:26:
11:3b:68:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:20 2023 by rpki-client on console-fra.rpki-client.org